1. The following PRIVACY POLICY ("Privacy Policy") supplements and is subject to Deep Insight Solutions, Inc. d/b/a Blattner Technologies ("Company") Hosting Terms and Conditions ("T&C") which are incorporated herein by this reference. Capitalized terms used and not otherwise defined herein shall have the meanings set forth in the T&C. In the event of a conflict between this Privacy Policy and the T&C, this Privacy Policy shall control. Customer acknowledges that Customer has read this Privacy Policy and Company's Data Processing Addendum.

2. Agreement to Abide by Privacy Policy. BY ACCESSING THE WEBSITES OR CUSTOMER ACCOUNT, SIGNING UP FOR OR USING THE PRODUCTS, CUSTOMER AGREES TO BE BOUND BY THIS PRIVACY POLICY AND THE AGREEMENTS. Company's collection of Personal Information (as defined below) is required by Company to serve the Website and deliver the Products. Refusal to provide required Personal Information to Company may delay or prevent access to the Website and/or providing the Products.

3. Privacy Policy. This Privacy Policy explains how and what data Company collects and how Company uses Personal Information (as defined herein). This Privacy Policy also describes options Company provides for Customer to access, update or otherwise take control of Personal Information that Company or its sub-processors process. For questions about Company's practices or Customer's rights described below, please contact Company's Data Protection Team by email at support@blattnertech.com. Please allow 2 to 3 business days for a response. By submitting a request Customer agrees to the terms of the Privacy Policy regarding Customer's personally identifiable information.

4. Changes to the Privacy Policy. Company reserves the right, in its sole and absolute discretion, to amend this Privacy Policy at any time, for any reason, which amendment(s) will be effective upon posting to the Website(s). The date of the last revision to this Privacy Policy will be indicated by the "Last Updated" date located at the top of this Privacy Policy. By accessing the Websites or Customer Account, signing up for or using the Products after such changes or modifications have been made shall constitute Customer's acceptance of this Privacy Policy as of "Last Updated" date. Company may occasionally notify Customer of changes or modifications to this Privacy Policy by email but is not required to do so. It is Customer's responsibility to log into and keep Customer Account information accurate. Company assumes no liability or responsibility for Customer's failure to receive an email or other electronic notification (i.e., through Customer Account) if such failure results from Customer's failure to access Customer Account or related to an inaccurate email address.

5. Information Company Collects. Personal Information: Company may collect information (i.e., via telephone, text, email, paper and/or other interactions through Account, with the Websites or Products) when Customer provides such information on the Website(s) or through Customer Account, signing up for or using the Products or otherwise interacts with Company (collectively, "Personal Information") (i.e., the types of Personal Information collected may include, but is not limited to, Internet Protocol (IP) address, name, address, telephone number, birth date, billing, and delivery information, email address, information about Customer, credit card or other financial account information, or other identifying information about Customer):

• Registration. Register and manage the Account, including to allow access to and use of the Products; process payments or credits; and offer promotional programs.
• Improve the Website and Products. Use information for analytical purposes and to enable Company to improve the Website and Products; and provide tailored and/or optimized experience.
• Individualization. Notify Customer about special offers and products or services available from Company, its affiliates, or partners.
• Communication. Communicate with Customer or facilitate communication between Customer and Company, its affiliates, or partners; conduct, monitor and record interactions with Company, Website and the Products; host reviews, forum posts, photos, videos, and other content; respond to requests, questions and comments.
• Legal Compliance. Resolve disputes or troubleshoot problems; prevent fraud and other potentially prohibited or unlawful activities; comply with relevant regulations and laws, respond to legal requests, prevent harm, and protect Company rights; provide payment services, including to detect and prevent money laundering, fraud and security incidents, to comply with legal obligations, and to enforce any applicable terms of service.

PLEASE NOTE, IF COMPANY USES AUTOMATED DECISION-MAKING TECHNOLOGIES TO PROCESS PERSONAL INFORMATION, COMPANY WILL IMPLEMENT APPROPRIATE MEASURES REQUIRED TO SAFEGUARD Customer's RIGHTS AND FREEDOMS INCLUDING Customer's RIGHT TO OBTAIN HUMAN INTERVENTION.

1. Non-Personal Data. Company may also collect information about Customer's browsing activities and history or other information that is not considered Personal Information through Customer's use of and visits to the Website, Products or Company's resources through a variety of technologies, including, but not limited to, cookies, tags, beacons, chatbots, and other tracking tools. Cookies may be placed by Company or Company's web analytics third-party vendors or partners on the Websites or within the Products. Types of non-personal data collected may include, but is not limited to, search terms, new or returning user information, browser information, computer type, operating system, internet service providers, website usage, referring/exit pages, platform type, date/time stamp, number of clicks and movements within a webpage, advertisements viewed, among other non-personal data (collectively, all of the foregoing data is considered "Non-Personal Data"). Additionally, cookies, tags, and other tracking tools placed by web analytics third-party vendors or partners may collect other information including, but not limited to, industry and/or company size, among other Non-Personal Data.

• Company's use of cookies to collect information is in order to improve the Websites and Products.
• Customer can instruct a browser to refuse all cookies or to indicate when a cookie is being implemented.
• If Customer does not accept cookies, use of some features of the Websites and/or Products may not be available.

1. Do Not Track Disclosure. Company supports Do Not Track ("DNT"). DNT is a preference Customer can enable a web browser to inform websites not to track Customer's information.

2. How Personal Information is Collected. Company collects Personal Information by telephone, text, email, paper and/or other interactions by Customer with the Websites or Products.

3. How Company Uses and Shares Personal Information.

a. Company strongly believes in both minimizing the data collected and limiting its use and purpose to only that (a) for which Company has been given permission, (b) as necessary to deliver the Websites or Products, or (c) as Company might be required or permitted for legal compliance or other lawful purposes.

b. Use of Personal Information. Once collected, Company may use Personal Information including, but not limited to:

• Provide service communications such as bill reminders, order confirmations, program registrations, and customer service messages;
• Respond to Customer emails or online requests for products, services, or information;
• Deliver and process surveys;
• Processing submitted job applications;
• Personalize and improve the usability of the Websites and/or Products;
• Fulfill and/or deliver the Products;
• Tailor content, advertising, email marketing automation and marketing to Customer;
• Share with third-parties as required by law or to protect Company as described herein;
• Share Customer's email address as permitted as described herein;
• Communicate with Customer;

This enables Company to:

• Improve and optimize the operation and performance of the Websites or Products;
• Diagnose problems with and identify any security risks, errors, or needed enhancements to the Websites or Products;
• Detect and prevent fraud and abuse of Company's systems, Websites or Products;
• Collecting aggregate statistics about use of the Websites or Products; and/or
• Understand and analyze Customer use of the Websites or Products.

c. Transfer of Data Abroad. Utilization of the Websites or Products from a country other than the country where Company's servers are located, Customer's communications and interactions with Company may result in transferring Personal Information data across international borders. In such cases, Personal Information data is handled according to this Policy.

d. Sharing to Fulfill Service Requests and Perform Business Functions. Personal Information may be shared with certain third parties to fulfill the Customer's service requests. Company may also share such information with service providers that perform business functions for Company. Company only provides data to service providers that have taken appropriate measures to protect such information under contractual obligations on those service providers to ensure each only uses Personal Information to provide for specific services.

e. Sharing Personal Information When Legally Necessary or to Protect Company's Interests. Company may disclose Personal Information if required to do so by law or in the good-faith belief that such action is necessary to: (a) conform to legal requirements or comply with legal process served on Company, including, but not limited to, compliance with legal, regulatory and law enforcement requests. In such instances, Company cooperates with government and law enforcement agencies and private parties to enforce and comply with the law. Company will disclose any information about Customer to government or law enforcement agencies or private parties as Company, in Company's sole and absolute discretion, believes necessary or appropriate to respond to claims and legal process (such as preservation requests, warrants, subpoenas or court orders), to protect Company's property and rights or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity Company considers to be illegal or unethical, among other valid legal reasons. To the extent Company is legally permitted to do so, Company will take reasonable steps to notify Customer in the event that Company is required to provide Customer Personal Information to third parties as part of the legal process; (b) protect and/or defend the rights or property of Company; (c) protect the personal safety of Company personnel or users of the public in appropriate circumstances; or (d) if Company and/or its assets (or a portion of its assets) are sold, assigned, transferred, or merged, or if Company undergoes some other change, including a change to the structure of Company's organization. Customer acknowledges and agrees that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of Company or Company's assets may continue to process Customer Personal Information as set forth in this Privacy Policy.

f. Sharing With Company's Affiliated Companies. Company may share Personal Information with its subsidiaries, affiliated companies, or agents for various purposes, including but not limited to administrative purposes and to assist Company in providing the Products to Customer or supporting Company's mission or as may be required by law.

g. Sharing With Third-Party Services Customer Uses at Their Own Risk. The Websites or Products may allow Customer to connect with other websites, products, or services, including, but not limited to social media websites, plugins and applications ("Third-Party Services"). Customer is responsible for ensuring that when using Third-Party Services, Personal Information shared with them is subject to their respective privacy policies and not this Privacy Policy. Customer acknowledges and agrees that Company is not responsible for misuse of Customer Personal Information by any Third-Party Services.

Please be aware that when Customer uses any Third-Party Services, Company's Privacy Policy is no longer in effect. Customer's browsing and interaction on any Third-Party Services, including those that have a link on Company's Website, is subject to that Third-Party Services own rules and policies.

h. External Links. The Websites or Products may contain links to other websites that are not owned or controlled by Company. Customer is responsible for ensuring that when using Third-Party Services, Personal Information shared with them is subject to their respective privacy policies and not this Privacy Policy. Customer acknowledges and agrees that Company is not responsible for misuse of Customer Personal Information by any Third-Party Services.

1. How Company Secures, Stores and Retains Personal Information.

a. Company follows generally accepted standards to store and protect the Personal Information it collects, both during transmission and once received and stored, including utilization of encryption where appropriate.

b. Company retains Personal Information only for as long as necessary to provide the Products and as necessary to comply with Company's legal obligations, resolve disputes, and enforce its agreements.

1. How Customer Can Access, Update, or Delete Data. Company respects Customer's privacy rights and provides Customer with reasonable access to the Personal Information that Customer may have provided through Customer's use of the Websites or Products. If Customer wishes to access or amend any other Personal Information Company holds about Customer, or request that Company delete any information about Customer, Customer may contact Company by opening a support ticket at support@blattnertech.com. Customer acknowledges that Company will respond to the request within 2 to 3 business days. Please note that while any changes Customer makes will be reflected in active user databases instantly or within a reasonable period of time, Company may retain all information Customer submits for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where Company otherwise reasonably believes it has a legitimate reason to do so.

2. Children's Privacy. Company does not knowingly collect any Personal Information from children under the age of 13. If Customer is under the age of 13, Customer should not submit any Personal Information through the Websites or Products. Company encourages parents and legal guardians to monitor their children's Internet usage and to help enforce this Privacy Policy by instructing their children never to provide Personal Information through the Websites or Products without their permission. If Customer has reason to believe that a child under the age of 13 has provided Personal Information to Company through the Websites or Products, please contact Company, and Company will use commercially reasonable efforts to delete that information.

3. GDPR and Other Data Protection Laws. Company makes every effort to comply with all applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). If Customer is a resident of the European Economic Area (EEA), Customer has certain data protection rights. Company aims to take reasonable steps to allow Customer to correct, amend, delete, or limit the use of Personal Information. If Customer wishes to be informed of what Personal Information Company holds about Customer and if Customer wants it to be removed from Company's systems, Customer is requested to contact Company. In certain circumstances, Customer has the following data protection rights:

• The right to access, update, or delete the information Company has on Customer.
• The right of rectification. Customer has the right to have Customer information rectified if that information is inaccurate or incomplete.
• The right to object. Customer has the right to object to Company's processing of Customer's Personal Information.
• The right of restriction. Customer has the right to request that Company restrict the processing of Customer's personal information.
• The right to data portability. Customer has the right to be provided with a copy of the information Company has on Customer in a structured, machine-readable, and commonly used format.
• The right to withdraw consent. Customer also has the right to withdraw consent at any time where Company relied on Customer's consent to process Customer's personal information.

If Customer makes a request, Company will respond within 2 to 3 business days. Customer acknowledges that Company may ask Customer to verify Customer's identity before responding to such requests. Customer acknowledges that Company may not be able to provide the Products without some necessary data.

Customer acknowledges that Company has the right to transfer Customer data, including Personal Information, to and from the United States and other countries and the Customer's use of the Products shall be deemed an express consent of such transfer.

1. Changes to Privacy Policy. Company may modify this Privacy Policy from time to time in Company's sole and absolute discretion and will notify Customer by revising the "Last Updated" date at the top of this Privacy Policy, which is the date it was last revised. If Company makes material changes to this Privacy Policy, Company will notify Customer by email to the email address specified in Customer Account or by means of a notice on the Websites or Products prior to the change becoming effective. Customer acknowledges and agrees that Company will not be liable for any damages (in contract, tort, or otherwise) caused by a failure to provide notice to Customer. Customer's continued use of the Websites or Products after the revised Privacy Policy has become effective indicates that Customer has read, understood, and agreed to the current version of this Privacy Policy.

Contact Information: Blattner Technologies Deep Insight Solutions, Inc. Data Protection Team support@blattnertech.com

Last Updated: November 1, 2023